Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
File:                     yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft (raw, json)
Hash identifier:          ut4gLAStOj8QYjutCwBwDWqoZMenEkkIY+27SFpx/8c=
Subject key identifier:   64:51:25:D2:1F:29:F6:D8:FD:DC:36:3E:ED:18:37:CC:49:94:21:6B
Authority key identifier: C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB
Certificate issuer:       /CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
Certificate serial:       01962F74BA462E27260777A6EE7178A00D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft
Manifest number:          A8
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: RgDK0GlNrO7C7ubV0WX7Z9uLa44.roa (hash: rsSKr9gwgh4LATGzKPPW1fvQ8qeoiCF1icD7tfZVV58=)
                          2: yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl (hash: KeyOZvYCORPh3FhpjWwTtpAjhZfBjvrpci4mMJBmvTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ba:46:2e:27:26:07:77:a6:ee:71:78:a0:0d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e7aac3d724d9d49f3027133633ba119bb367fb
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=645125d21f29f6d8fddc363eed1837cc4994216b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:87:08:3f:2d:a0:48:fc:5e:8a:2d:36:f2:
                    2e:d6:4f:99:e3:ef:da:8a:1f:0f:e1:98:5a:68:22:
                    3a:a5:86:e5:6f:09:1f:2f:c6:f6:c2:2c:70:0d:c8:
                    4d:29:06:83:62:6e:86:b4:e1:7b:5d:f0:e9:af:b1:
                    e7:d6:52:23:67:22:7c:c8:dd:40:e0:f3:f9:3e:ab:
                    06:e6:cc:fe:bb:a5:39:39:dc:60:71:21:b3:e6:ac:
                    a9:18:93:53:2a:98:65:ad:b0:70:33:80:44:91:73:
                    58:ab:c2:83:52:78:93:33:78:d2:33:55:19:56:db:
                    e4:f5:af:68:74:46:34:67:6f:b6:fd:34:3f:b7:0a:
                    d9:06:d6:dc:13:22:e1:41:28:02:1f:3b:52:d6:3e:
                    90:0a:ff:bb:41:aa:f9:62:68:1a:ab:a1:4f:20:1a:
                    a6:90:d1:13:b8:64:02:0c:4e:fd:b5:95:d3:3b:98:
                    4e:41:a6:38:6f:6d:a2:e3:b8:a2:77:6d:29:57:96:
                    a2:97:9f:d9:e3:26:85:cc:28:3b:37:a5:bd:da:b2:
                    b7:cf:84:1d:34:3c:3d:fa:46:ae:13:69:77:52:e2:
                    c6:b1:f6:69:4e:1a:68:a2:62:68:d2:be:69:92:ff:
                    87:7d:27:29:bf:63:15:4c:cc:0b:8a:eb:db:4a:44:
                    84:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:51:25:D2:1F:29:F6:D8:FD:DC:36:3E:ED:18:37:CC:49:94:21:6B
            X509v3 Authority Key Identifier:
                keyid:C9:E7:AA:C3:D7:24:D9:D4:9F:30:27:13:36:33:BA:11:9B:B3:67:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4f751d-a355-40f3-aa44-7cca6773601a/1/yeeqw9ck2dSfMCcTNjO6EZuzZ_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:36:b6:0d:fe:bc:30:d7:7c:59:86:a6:ea:43:4f:49:48:
         d2:8a:c9:fe:90:ba:ed:52:39:74:82:0b:ed:08:52:58:a9:df:
         ab:46:a5:63:69:97:28:50:cd:8d:19:ab:ad:ca:87:72:51:bc:
         b2:f2:f8:58:10:6e:0c:3c:6b:50:2e:f8:1a:4a:20:f9:7b:86:
         a8:50:e1:8d:39:f1:5b:0f:b1:6f:fa:a9:0f:9b:23:0e:b8:d6:
         2a:7d:c4:63:77:5c:0e:32:51:db:4d:71:3e:f0:64:3a:89:7d:
         0a:bc:1e:33:01:d6:05:29:d0:0b:57:1c:bc:39:fb:51:8b:de:
         13:e9:8a:af:2f:d8:aa:b4:a9:6c:64:21:5d:87:64:f1:0d:08:
         c1:66:4a:2c:a4:7b:2b:46:b1:73:e6:26:bd:63:04:0e:a0:a1:
         a2:b5:39:e7:ed:50:d8:1f:85:a2:a7:a3:23:e8:c7:0c:97:af:
         e1:0f:cb:69:6d:e5:dc:74:53:9b:a9:9d:21:d3:2f:ab:46:4e:
         3f:6f:7c:90:f4:55:b9:10:a3:f7:a7:a2:31:d5:a2:d9:e8:5f:
         d2:a4:5e:4d:58:ac:50:1b:2f:bc:d5:a6:f4:aa:84:20:3c:fe:
         a0:95:b0:4f:e6:8c:78:15:fe:00:6c:f2:cd:f1:8c:6b:01:89:
         97:12:e6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----